tandoor: port 8080 -> 80 and set ALLOWED_HOSTS (2.x moved both)

WIP within campaign 7 -- validated in the next step.

Campaign 7 catalog sweep.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Nn3VgQk9iwEGgyx6QJ2NvE

templates/tandoor/docker-compose.yml

@@ -18,6 +18,9 @@ services:
         condition: service_healthy
     environment:
       - SECRET_KEY=${SECRET_KEY}
+      # A tandoor 2.x Django-ja ALLOWED_HOSTS nélkül MINDEN kérésre 400-at ad
+      # (a healthcheck-re is), a konténer így soha nem lesz healthy.
+      - ALLOWED_HOSTS=${SUBDOMAIN}.${DOMAIN},127.0.0.1,localhost
       - DB_ENGINE=django.db.backends.postgresql
       - POSTGRES_HOST=tandoor-postgres
       - POSTGRES_PORT=5432
@@ -36,7 +39,7 @@ services:
         limits:
           memory: 1024M
     healthcheck:
-      test: ["CMD", "wget", "--spider", "-q", "http://127.0.0.1:8080/accounts/login/"]
+      test: ["CMD", "wget", "--spider", "-q", "http://127.0.0.1:80/accounts/login/"]
       interval: 30s
       timeout: 5s
       retries: 3
@@ -49,7 +52,7 @@ services:
       - "traefik.http.routers.tandoor.entrypoints=websecure"
       - "traefik.http.routers.tandoor.tls=true"
       - "traefik.http.routers.tandoor.tls.certresolver=letsencrypt"
-      - "traefik.http.services.tandoor.loadbalancer.server.port=8080"
+      - "traefik.http.services.tandoor.loadbalancer.server.port=80"
 
   tandoor-postgres:
     image: postgres:16-alpine